Reflected Cross-Site Scripting Vulnerability in Azon Dominator by Unknown Vendor
CVE-2025-40725

5.1MEDIUM

Key Information:

Vendor

Azon Dominator

Status
Azon Dominator PHP Script
Vendor
CVE Published:
10 September 2025

What is CVE-2025-40725?

A reflected cross-site scripting vulnerability exists in Azon Dominator, allowing attackers to execute arbitrary JavaScript in victims' browsers. By crafting a malicious URL that exploits the 'q' parameter in the /search path via GET requests, the attacker can steal sensitive user information, such as session cookies, or execute actions within the user’s session. This vulnerability underscores the importance of proper input validation and robust cybersecurity measures to mitigate such risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Azon Dominator PHP script all versions

References

https://www.incibe.es/en/incibe-cert/notices/aviso/reflec...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gonzalo Aguilar GarcĂ­a (6h4ack)
JSON
.